Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/8d2b4036-50c7-3b92-8783-15727eaa6402.roa
File:                     8d2b4036-50c7-3b92-8783-15727eaa6402.roa (raw, json)
Hash identifier:          ZFdd4Ip3ukbPjbeTd34FxmXjBuBUNyzcA/a1TqFZy9Q=
Subject key identifier:   5E:D0:4A:5C:73:B4:D7:BE:34:BA:89:3B:CE:E4:29:62:47:31:0D:CF
Certificate issuer:       /CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
Certificate serial:       010D0C9F4328584EA17A8817D91255B274FEC780
Authority key identifier: C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/8d2b4036-50c7-3b92-8783-15727eaa6402.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     11766
IP address blocks:        206.127.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:88:17:d9:12:55:b2:74:fe:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=0942ad04-6968-4383-8c2f-63409c004bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9c:5e:0f:1c:25:10:70:01:e3:34:77:f7:21:
                    7b:b4:0e:a4:7d:ad:6c:b5:f2:17:fa:7c:bb:c2:62:
                    ff:38:5d:09:97:9e:47:67:62:8a:34:b2:82:ca:05:
                    66:8a:6c:54:a4:19:b8:27:9f:20:ad:75:d4:bd:00:
                    d5:7a:c8:fb:73:86:74:45:2c:b5:f0:30:1d:f9:f9:
                    8f:d6:79:ef:77:8a:ad:ce:0e:b2:5e:2d:8b:f6:82:
                    7b:d1:84:4d:42:bb:b7:f1:ee:be:b5:62:10:a6:3f:
                    09:50:f3:5a:23:22:f1:8f:42:69:8c:16:b9:84:48:
                    6e:d7:d9:9e:93:8a:f8:da:bd:d9:ae:b2:d4:95:d8:
                    75:65:da:a7:31:80:37:15:ad:40:f6:b3:3f:9b:33:
                    21:10:7f:1d:ce:3a:f5:0e:b8:17:31:35:c9:5e:c6:
                    38:f1:f2:9a:9f:f2:65:93:b5:22:73:30:21:52:66:
                    6d:3f:f8:59:02:b8:61:ba:82:8e:b3:66:98:de:b7:
                    12:6a:c5:83:20:66:2e:89:08:e4:1c:94:75:dc:e0:
                    59:f6:22:79:e8:e0:4b:ce:56:4e:44:7b:cf:fc:d1:
                    5d:6b:e0:0d:c3:95:90:79:b1:9b:51:6b:bb:d5:6f:
                    1d:a8:80:d1:24:37:87:ad:c2:97:3c:3d:0e:30:2d:
                    2e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D0:4A:5C:73:B4:D7:BE:34:BA:89:3B:CE:E4:29:62:47:31:0D:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/8d2b4036-50c7-3b92-8783-15727eaa6402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl

            X509v3 Authority Key Identifier:
                keyid:C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.127.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:bc:c6:81:38:0c:e8:6e:bd:c0:b6:d2:ee:47:be:e6:37:8e:
         6d:a2:f2:ac:af:08:07:34:c2:3f:4f:18:9e:9a:73:a2:01:0c:
         84:5d:1b:59:f2:87:05:72:6a:6f:4e:b6:b5:89:17:2a:c1:f5:
         d8:89:55:44:94:92:df:df:52:83:ea:fc:d7:40:11:bf:0d:b2:
         00:63:f6:38:27:05:ca:0a:5c:89:71:ae:35:a8:7a:7d:bb:df:
         53:bf:5e:a5:e0:3a:af:e3:ee:63:16:db:7d:82:a8:3c:7d:3b:
         c9:54:5a:d6:ee:13:5b:fd:43:98:4b:88:10:ec:c6:83:b2:17:
         e0:18:7d:67:e4:06:f1:40:b8:a1:23:62:fd:83:0d:de:0f:84:
         f5:fd:2c:fd:7c:59:cd:dd:34:49:d5:e4:ef:f9:26:df:6a:84:
         77:95:47:ad:aa:d3:ee:52:08:e2:15:12:75:ed:73:7c:2b:72:
         e3:ce:2e:4c:db:b6:e3:2b:3c:39:ba:d3:e7:26:28:d2:0c:86:
         f6:02:80:fb:99:8b:cc:a9:c7:a6:67:12:ff:e6:30:14:ef:39:
         ab:41:15:98:1b:39:4e:ec:73:a1:b5:8d:d7:f5:c5:5e:15:a8:
         ed:59:8e:49:98:c0:00:ba:38:f2:29:52:92:c0:da:20:dd:11:
         a2:34:38:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:50 2026 by rpki-client